Model on Ensuring Data Subject Access Request (DSAR) Security in the Context of GDPR


Toy F., ALKAN M.

Turkish Journal of Mathematics and Computer Science, cilt.17, sa.1, ss.282-295, 2025 (Scopus) identifier

Özet

Privacy has been a fundamental concern for humanity since the beginning and remains one of the most critical human rights today. Modern laws, such as GDPR Article 15, allow individuals to obtain access to the personal information held concerning them. This includes the right to inquire whether their data is processed and to access that data if desired. While these laws outline what must be done to protect personal data, they often lack clear guidelines on how to implement these protections in practice. Additionally, there are potential security risks associated with Data Subject Access Requests (DSARs), particularly if a data controller or processor acts maliciously. The aim of this study is to develop a model that will eliminate vulnerabilities and provide secure and reliable data access, especially in cases where the data processor and data controller may be malicious.